I can see a lot of report indices that creates several shards. The reason is that I have several kibana indices, and I need as many reporting indices. It increases the number of shards I have, and I am chasing them to reduce the count
Kibana also has Index Management / Index Lifecycle Management which can allow you to customize "warm" and "cold" phases of the indices.
I'm not sure if lifecycle management would work if you tried to set up rollovers by adding a "Hot phase" of rollovers in the index lifecycle policy: that requires the application to read / write to an index alias.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.